Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JsRCv7B66viqDz3kMd0y2XY2Zlc.roa
File: JsRCv7B66viqDz3kMd0y2XY2Zlc.roa (raw, json)
Hash identifier: P3NKKOOXG9zTOP5xdWhvV9J0LlyGMraMsCUCoVX73Os=
Subject key identifier: 26:C4:42:BF:B0:7A:EA:F8:AA:0F:3D:E4:31:DD:32:D9:76:36:66:57
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183CBECCAA183F9CE5AE06D8544FF3D321B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JsRCv7B66viqDz3kMd0y2XY2Zlc.roa
Signing time: Wed 12 Oct 2022 11:20:36 +0000
ROA not before: Wed 12 Oct 2022 11:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.144.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:ec:ca:a1:83:f9:ce:5a:e0:6d:85:44:ff:3d:32:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 12 11:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26c442bfb07aeaf8aa0f3de431dd32d976366657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:b1:49:95:3e:1b:3c:9f:d8:e0:22:f2:bb:
07:a7:48:b0:49:6e:df:dd:18:56:70:b4:1f:5d:d6:
74:cf:76:19:aa:cb:13:f0:01:89:f5:5c:cc:40:5c:
92:bd:2e:51:8d:d8:67:87:f7:d0:f6:64:fe:10:7f:
2e:ab:95:df:83:b4:d4:67:c2:52:2b:8d:d9:05:61:
24:79:6e:f4:30:1b:61:e9:bc:1c:9f:d5:79:23:64:
ad:39:07:96:51:11:68:b3:9e:a0:82:b5:88:f2:7c:
4e:7e:f0:4b:c6:a1:c6:3a:56:3c:4b:f9:c4:2e:88:
80:45:1a:91:6f:36:98:54:93:f0:75:59:45:3e:10:
2a:0e:f5:09:61:92:55:2e:72:69:46:15:e7:d1:94:
86:1d:27:61:86:ef:9d:12:a7:a7:52:24:b5:e5:5f:
d6:2b:e4:ac:a4:d1:55:05:02:7d:5a:6c:75:f1:f6:
d0:5d:d5:4e:f3:d2:2b:08:87:6a:a2:9c:5c:b7:1d:
70:28:b9:ac:c6:5f:f6:7a:42:3b:dd:2b:69:15:94:
2b:e4:93:03:51:34:cb:0c:f0:03:4c:be:c4:4c:53:
27:a6:04:fb:40:1a:ce:06:a7:65:70:09:ca:85:e6:
26:ad:dd:35:cf:42:95:7e:63:6a:50:1c:2c:a1:1e:
62:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C4:42:BF:B0:7A:EA:F8:AA:0F:3D:E4:31:DD:32:D9:76:36:66:57
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JsRCv7B66viqDz3kMd0y2XY2Zlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ac:a1:a7:d9:bb:39:9e:31:dd:0d:42:87:26:96:82:3c:c1:
d2:6b:13:70:91:3a:88:64:65:a3:00:09:fe:a4:bf:00:4f:fe:
bd:58:fd:2e:fc:e2:24:50:0d:bf:c2:57:e8:38:dc:7e:49:f9:
be:8c:93:0d:3b:83:1e:a2:97:8d:0d:ab:23:bd:2a:16:c8:49:
68:a7:d3:de:1a:24:58:cc:e5:d1:36:6d:19:a2:27:9a:88:da:
fb:e6:ce:7f:29:71:70:5a:6d:2a:ae:37:e6:e9:3a:f2:35:a1:
9a:20:78:fa:f0:4a:ac:cd:7b:c5:ba:c0:a3:5f:35:8e:42:7d:
19:2a:36:22:03:44:c6:e1:b7:e9:a7:38:e1:fc:52:1a:ef:ec:
58:17:43:9c:a2:fc:71:32:bd:2b:f6:2d:d7:d9:db:16:09:d4:
3d:47:39:69:ec:3c:2b:f4:07:5c:fe:79:73:14:8f:cd:3c:b1:
ca:f7:bf:3e:f1:b4:ad:24:bf:be:ac:ed:02:1c:3d:92:08:3c:
aa:a9:21:09:5e:be:41:a0:d3:62:a6:6a:b9:f7:8e:af:48:2f:
a0:86:ee:2c:96:61:cb:ad:e3:ff:d2:ab:ca:87:dd:68:ae:73:
d7:9b:22:c2:d1:01:21:85:16:42:01:51:85:38:bc:14:b0:59:
e6:47:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org